vitest
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
nlxcommand to execute thevitesttest runner. This is a standard and expected behavior for a testing-focused skill designed to run unit and integration tests within a development environment. Examples includenlx vitest runandnlx vitest --clearCachefound inSKILL.mdandreferences/troubleshooting.md. - [INDIRECT_PROMPT_INJECTION]: The skill identifies an attack surface by ingesting and processing untrusted data from the repository, such as source code, test files, and configuration files.
- Ingestion points: Reads project files including
package.json,vitest.config.ts, and*.test.ts/tsxfiles as specified inSKILL.md(Workflow Step 1) andreferences/troubleshooting.md(Tests not found section). - Boundary markers: None explicitly defined to separate instructions from data, which is typical for code-processing skills.
- Capability inventory: Executes shell commands via
nlx vitestas documented inSKILL.md(Workflow Step 5). - Sanitization: None detected for processed file content, as the tool is intended to execute the code provided in the repository.
- Assessment: While the surface exists, it is inherent to the primary purpose of writing and running tests. The instructions emphasize following repository conventions and using narrow commands, which limits the likelihood of the agent following arbitrary instructions embedded in code.
Audit Metadata